EUVD-2025-112531

Malicious code in ini-carpo-async-unuk npm...

EUVD-2025-115655

Malicious code in carpo-semantic-release-kaus-jovian npm...

EUVD-2025-120691

Malicious code in vulcan-helios-carpo-local npm...

EUVD-2025-113653

Malicious code in fetch-start-carpo-pino npm...

EUVD-2025-115675

Malicious code in carpo-blaze-dagda-command npm...

Malicious code in carpo-adonis-draco-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f98bec85b5fc4e33b7bfac2687c0cf98d9b8227cdb2d94523ed5fcccb2162d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115666

Malicious code in carpo-ganymede-kastra-leda npm...

EUVD-2025-115662

Malicious code in carpo-init-stop-terser npm...

EUVD-2025-115653

Malicious code in carpo-tool-query-commitizen npm...

EUVD-2025-115668

Malicious code in carpo-elara-non-blocking-upgrade npm...

EUVD-2025-114641

Malicious code in dagda-forever-proxima-carpo npm...

MAL-2025-140429 Malicious code in carpo-antd-less-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd06c1c23d3f2cb03e4cf07ea26ad3cd85f7354f359c74d530248a1ed7cce40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144229 Malicious code in kronos-terser-carpo-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870c1b95dbbb3935fb4d72663c39242940aa9a912600163528e7cb70ebc29a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kronos-terser-carpo-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870c1b95dbbb3935fb4d72663c39242940aa9a912600163528e7cb70ebc29a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112962

Malicious code in halley-jovian-carpo-sadr npm...

EUVD-2025-112646

Malicious code in hyperion-bellatrix-carina-carpo npm...

EUVD-2025-116525

Malicious code in arcturus-toml-carpo-postcss-loader npm...

Malicious code in canopus-ini-carpo-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb5be968ca0d94f6e02b8d6c96a37621dce07de08d5bde7184663b619ec78cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-antd-less-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd06c1c23d3f2cb03e4cf07ea26ad3cd85f7354f359c74d530248a1ed7cce40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-carpo-init-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84df6db1ad28199f71552122f364b369efb4868373a65e0ed553444b217fb422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...